ben_s
Any half decent IT department would get an alert if they couldn't ping an AP, and they would have a look at the switch to see that an interface was disconnected, then go and take a look.

They'd then notice a pattern, take a look at the records to see who was connected to any nearby APs at the time, and because you'd have to do it when the office was quiet, fairly soon work out who it was disconnecting them.

Anonymous Coward
You think we don't have a vm on that network that will easily accept additional network interfaces, created with the access point's mac address and ip addresses to fool the monitoring system? Some of us weren't born yesterday.

rIf you really want to confuse people, you can use a $250 spool of fiber and make their computer, which is 50m from the network closet, appear to be 25km farther away. If you can't get your hands on a spool of fiber, but have a box of patch cables and a spare 48 port switch, you can connect the user to port 1 and the upstream switch to port 48, and then put ports 1-2 in vlan 1, 3-4 in vlan 2. 5-6 in vlan 3, etc, and cable ports 2-3, 4-5, 6-7, etc, making his computer 25 hops away from the actual network.

anon for legal reasons.